7488 matches found
Replay Attack
Overview dradis-nessus is an add-on that allows you to upload and parse output produced from Tenable's Nessus Scanner into Dradis. Affected versions of this package are vulnerable to Replay Attack via the handling of external image resources over HTTPS. An attacker can obtain Net-NTLM hashes of...
SUSE CVE-2025-48949
Navidrome is an open source web-based music collection server and streamer. Versions 0.55.0 through 0.55.2 have a vulnerability due to improper input validation on the role parameter within the API endpoint /api/artist. Attackers can exploit this flaw to inject arbitrary SQL queries, potentially...
CVE-2025-49826
CVE-2025-49826 affects Next.js (Next.js versions 15.0.4-canary.51 through, but not including, 15.1.8). The root cause is a cache poisoning flaw that can allow a HTTP 204 response for static pages to be cached and subsequently served to all users, yielding a DoS. The issue does not impact customer...
Arbitrary File Upload
Overview Affected versions of this package are vulnerable to Arbitrary File Upload via the fileUploadHandler process. An attacker can write arbitrary files to the filesystem by supplying crafted values to the fc.Name parameter, which is not properly sanitized, allowing directory traversal. This c...
OPENSUSE-SU-2025:15227-1 grype-0.94.0-1.1 on GA media
These are all security issues fixed in the grype-0.94.0-1.1 package on the GA media of openSUSE Tumbleweed...
UBUNTU-CVE-2025-52886
Poppler is a PDF rendering library. Versions prior to 25.06.0 use std::atomicint for reference counting. Because std::atomicint is only 32 bits, it is possible to overflow the reference count and trigger a use-after-free. Version 25.06.0 patches the issue...
Incorrect Privilege Assignment
Overview Affected versions of this package are vulnerable to Incorrect Privilege Assignment due to improper retention of the mstatus.SUM bit, which remains set contrary to privileged specification constraints. An attacker can gain unauthorized access to physical memory by exploiting this improper...
WordPress Vikinger Theme <= 1.9.32 is vulnerable to Arbitrary File Deletion
Software Vikinger Type Theme Vulnerable versions = 1.9.32 Fixed in 1.9.33 OWASP Top 10 A1: Injection Classification Arbitrary File Deletion CVE CVE-2025-4946 Patch priority High CVSS severity High 7.7 Developer Claim ownership PSID b0a366979549 Credits Foxyyy Required privilege Subscriber Publish...
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the H5Ofsinfoencode function. An attacker can cause a crash or disrupt service by providing specially crafted input that triggers a heap-based buffer overflow. Remediation A fix was pushed into the master...
PT-2025-27321
Name of the Vulnerable Software and Affected Versions: Apache Seata incubating versions 2.0.0 through 2.3.0 Description: The issue is related to the deserialization of untrusted data. It is recommended that users upgrade to a fixed version to resolve the issue. Recommendations: For Apache Seata...
WordPress Responsive Blocks plugin <= 2.0.6 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by zaim in WordPress Plugin Responsive Blocks versions = 2.0.6...
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the H5Omtimenewencode function. An attacker can cause a crash or disrupt service availability by providing specially crafted input to the affected component. Remediation A fix was pushed into the master...
Incorrect Privilege Assignment
Overview Affected versions of this package are vulnerable to Incorrect Privilege Assignment via the installation process of the Import Page component in /admin-cp/imports. An attacker can gain unauthorized access to restricted actions or data by exploiting incorrect privilege assignments during...
SUSE CVE-2025-52893
OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. OpenBao before v2.3.0 may leak sensitive information in logs when processing malformed data. This is separate from the earlier HCSEC-2025-09 / CVE-2025-4166. Th...
WordPress Ninja Forms plugin <= 3.10.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via CSTI vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via CSTI vulnerability discovered by Asaf Mozes in WordPress Plugin Ninja Forms versions = 3.10.2.1...
CVE-2025-49003 Dataease H2 JDBC Connection Remote Code Execution
DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.11, a threat actor may take advantage of a feature in Java in which the character "ı" becomes "I" when converted to uppercase, and the character "ſ" becomes "S" when converted to uppercase. A threa...
CVE-2025-49003
DataEase (H2) prior to version 2.10.11 is vulnerable to a Java character-conversion issue where certain characters (for example, ı -> I and ſ -> S) can be manipulated to trigger remote code execution. Affected component is the Java-based text/processing logic linked to the DataEase data vis...
WordPress WP Masonry & Infinite Scroll plugin <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin WP Masonry & Infinite Scroll versions = 2.2...
Stack-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow via the deserializeArray function in the src/oatpp/json/Deserializer.cpp file. An attacker can cause a crash or disrupt service by sending specially crafted input that triggers a stack-based buffer overflow...
CVE-2025-6430
When a file download is specified via the Content-Disposition header, that directive would be ignored if the file was included via a embed or object tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability was fixed in Firefox 140, Firefox ESR 128.12,...